$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json) Hash identifier: UxBXwbyiEEI84EF7o4X4ABBLXB3FYWJ2ukkalIYe+oU= Subject key identifier: C2:FA:A8:34:31:44:26:81:A2:69:C6:1F:53:8C:8C:29:79:76:6D:4C Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Certificate serial: 3F3E4939B858B1E3A1B94F7C0BA578E4F7FA96A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 03:55:08 +0000 Manifest this update: Sat 26 Sep 2026 03:50:08 +0000 Manifest next update: Sun 27 Sep 2026 04:51:08 +0000 Files and hashes: 1: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=) 2: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=) 3: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: E9YolJwZ4X7LIz3CFO+nZ1WWw4Dva3HKTi7R9tRPws0=) 4: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=) 5: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=) 6: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=) 7: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=) 8: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=) 9: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=) 10: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 04:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3e:49:39:b8:58:b1:e3:a1:b9:4f:7c:0b:a5:78:e4:f7:fa:96:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F Validity Not Before: Sep 26 03:50:08 2026 GMT Not After : Sep 27 04:51:08 2026 GMT Subject: CN=C2FAA83431442681A269C61F538C8C2979766D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:c3:ab:ee:56:98:bf:91:05:d0:df:bd:e4: 4a:3f:f9:b0:a2:e3:17:29:6d:21:ad:1d:9c:00:2a: 2c:fe:c0:fd:f2:4b:12:42:d8:df:c9:15:8c:5d:52: c2:b6:61:29:c1:1c:53:59:fd:bf:11:89:2f:5d:a8: 3a:ce:76:32:53:b4:76:48:67:a7:ab:f7:98:ea:99: e3:0d:a5:cb:31:ee:aa:17:17:0f:4e:cc:8f:c4:57: 79:26:95:34:d5:49:56:6c:ec:90:a6:19:79:e7:75: d1:a2:cc:10:a6:98:b6:e9:48:a4:a0:12:55:5f:07: a6:05:45:51:0a:a7:13:85:3d:c9:c4:d3:14:27:83: dd:92:7a:a8:77:97:4d:fc:59:12:f4:ee:05:97:01: 35:84:c1:7f:42:0c:e6:3c:f2:8a:34:f8:74:a8:de: 9e:5b:0a:4c:f2:86:bf:f1:cc:05:be:36:ae:c3:81: cf:ff:1c:38:c6:f6:a5:d7:a5:35:7a:05:2d:e2:cb: ad:0f:ee:3a:e0:68:90:33:55:76:3d:e8:b7:3e:87: f9:a0:0e:3a:0a:6b:0f:d2:68:27:fe:3e:7c:d5:b6: 91:46:62:22:8d:d6:6a:a7:88:7b:1d:07:47:fc:03: f1:c3:43:40:40:69:c2:89:95:5b:54:f3:3f:26:f2: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FA:A8:34:31:44:26:81:A2:69:C6:1F:53:8C:8C:29:79:76:6D:4C X509v3 Authority Key Identifier: keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ad:2f:f0:b2:39:c2:5b:04:ae:c2:01:d2:2c:95:09:14:5e: 58:6b:af:97:67:09:26:08:21:39:fd:63:56:1d:f9:a7:5a:b8: f8:eb:82:e0:41:16:bc:ea:44:ce:9c:5f:7f:dc:1c:0a:f7:dd: 76:aa:d0:4b:d7:6f:4e:06:07:a1:a3:d2:42:31:f1:26:41:e7: 4d:6a:1e:49:52:53:01:86:a8:c5:f6:57:16:3d:5b:bb:d8:b9: e9:7b:94:54:73:aa:53:12:1a:c3:e4:14:e7:ad:fe:1a:16:c2: 55:10:8c:b4:2f:ae:f0:79:e2:7a:a7:d4:95:6d:50:d7:94:cf: d2:ab:a4:64:d1:cf:26:b9:dd:02:ba:b7:71:80:6f:d8:f7:49: 2f:72:c8:13:47:e4:72:94:a2:83:80:a5:3a:0e:23:d1:b2:04: bf:39:0b:13:3f:d8:8c:84:0b:b9:27:cf:3f:cf:a0:48:c7:59: 97:1b:73:3d:57:30:c3:cf:22:d8:f2:09:04:a1:dc:35:30:54: 8a:ca:75:b4:9a:e1:54:a6:3e:36:6c:ff:9e:d3:bb:ba:69:28: e1:92:90:6d:82:ba:aa:af:44:30:df:3d:f5:fc:5c:41:56:69: 42:bf:88:b9:7d:6f:48:da:aa:de:77:56:b2:1d:09:47:97:b8: 8f:04:a5:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPz5JObhYseOhuU98C6V45Pf6lqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx RTU3MEExRjAeFw0yNjA5MjYwMzUwMDhaFw0yNjA5MjcwNDUxMDhaMDMxMTAvBgNV BAMTKEMyRkFBODM0MzE0NDI2ODFBMjY5QzYxRjUzOEM4QzI5Nzk3NjZENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePsOr7laYv5EF0N+95Eo/+bCi 4xcpbSGtHZwAKiz+wP3ySxJC2N/JFYxdUsK2YSnBHFNZ/b8RiS9dqDrOdjJTtHZI Z6er95jqmeMNpcsx7qoXFw9OzI/EV3kmlTTVSVZs7JCmGXnnddGizBCmmLbpSKSg ElVfB6YFRVEKpxOFPcnE0xQng92Seqh3l038WRL07gWXATWEwX9CDOY88oo0+HSo 3p5bCkzyhr/xzAW+Nq7Dgc//HDjG9qXXpTV6BS3iy60P7jrgaJAzVXY96Lc+h/mg DjoKaw/SaCf+PnzVtpFGYiKN1mqniHsdB0f8A/HDQ0BAacKJlVtU8z8m8lq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvqoNDFEJoGiacYfU4yMKXl2bUwwHwYDVR0j BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2 NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIStL/CyOcJbBK7CAdIslQkUXlhrr5dnCSYI ITn9Y1Yd+adauPjrguBBFrzqRM6cX3/cHAr33Xaq0EvXb04GB6Gj0kIx8SZB501q HklSUwGGqMX2VxY9W7vYuel7lFRzqlMSGsPkFOet/hoWwlUQjLQvrvB54nqn1JVt UNeUz9KrpGTRzya53QK6t3GAb9j3SS9yyBNH5HKUooOApToOI9GyBL85CxM/2IyE C7knzz/PoEjHWZcbcz1XMMPPItjyCQSh3DUwVIrKdbSa4VSmPjZs/57Tu7ppKOGS kG2CuqqvRDDfPfX8XEFWaUK/iLl9b0jaqt53VrIdCUeXuI8EpVE= -----END CERTIFICATE-----Generated at Sat Sep 26 15:02:28 2026 by rpki-client